Factor (Factorjs) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2021-11-16. Vendor: Factorjs.

CVEs of Factor

• CVE-2021-25982 - CVSS 6.1 (medium), 2021-11-16: In Factor (App Framework & Headless CMS) forum plugin, versions 1.3.5 to 1.8.30, are vulnerable to reflected Cross-Site Scripting (XSS) at the “search”…
• CVE-2021-25985 - CVSS 9.8 (critical), 2021-11-16: In Factor (App Framework & Headless CMS) v1.0.4 to v1.8.30, improperly invalidate a user’s session even after the user logs out of the application. In…
• CVE-2021-25984 - CVSS 6.1 (medium), 2021-11-16: In Factor (App Framework & Headless CMS) forum plugin, versions v1.3.3 to v1.8.30, are vulnerable to stored Cross-Site Scripting (XSS) at the “post reply”…
• CVE-2021-25983 - CVSS 6.1 (medium), 2021-11-16: In Factor (App Framework & Headless CMS) forum plugin, versions v1.3.8 to v1.8.30, are vulnerable to reflected Cross-Site Scripting (XSS) at the “tags” and…